An AI-powered multi-agent pipeline for investigating on-chain attack transactions. Produces comprehensive incident reports with root-cause analysis, self-correcting Analyst-Validator debate, and optional Foundry PoC exploits.
Pipeline
- Parse input — tx_hash, chain, hints
- Setup — analysis directory + incident brief
- Planner — analysis plan, call trace
- Data Collector — manifest, contract sources
- Manifest Check — auto-corrects manifest
- Debate Loop — Analyst writes report; Validator challenges; repeat up to 2x
- Report — final incident report with code snippets, attack flow, loss analysis
- PoC [optional] — Foundry exploit test
What Makes It Different
- Code Snippets — Every report includes the vulnerable Solidity code with root cause annotation
- On-chain Artifacts — TX traces, decoded calldata, verified contract sources, funds flow analysis
- Analyst-Validator Debate — Multi-agent pipeline with adversarial review ensures factual accuracy
Supported Chains
| Alias | Chain | Chain ID |
|---|---|---|
eth | Ethereum | 1 |
bnb | BNB Chain | 56 |
arb | Arbitrum One | 42161 |
polygon | Polygon | 137 |
opt | Optimism | 10 |
avax | Avalanche | 43114 |
base | Base | 8453 |
Install
Install skill https://github.com/DarkNavySecurity/web3-skills/
Usage
# Analyze a transaction
/exploit-investigator 0x<tx_hash> eth
# With extra hints
/exploit-investigator 0x<tx_hash> eth "suspected price manipulation"
# Generate Foundry PoC
/exploit-investigator poc 0x<tx_hash>